I am to root my Nexus, so I have to unlock it first. But I worry that once done, some one may boot with customized recovery to copy or modify my files. Any idea?

  • there is nothing that can be done to address this concern, just as there can be no gaurentee that an adversary with physical access to the device can unlock it themselves to do the same. The Nexus root toolkit has a "relock" feature, that makes android believe its on a locked partition, but in reality, once unlocked, the device cannot be locked again, so don't count on the little open-padlock icon to tell you if someone who had your device didn't root it done their business, and then relocked the device. – Frank Thomas May 1 '14 at 12:59
  • @FrankThomas I may misunderstand your words, I feel sorry if I do. Unlocking an unrooted devices require data swiping, how can my adversary unlock my device, access my files and then relock my device? Without unlocking and third-party recovery, I know no way to access files. What I worry is that once I unlock my Nexus, someone can access my files while I don't know what's happened. – Noverull May 1 '14 at 13:43
  • @Noverull - Which is the point Frank made. Once unlocked the partition cannot actually be locked again, it says its locked, but its actually unlocked. Its sort of like a paper padlock on the door. – Ramhound May 1 '14 at 13:52
  • @Noverull, you are correct, there will be dataloss immediately after unlocking, but the stock recovery system allows the attacker sufficient ability to back up your content, that they could restore your old apps and data such that you would not likely notice. – Frank Thomas May 1 '14 at 15:20
  • The main takeaway here is a very old adage Physical Access == Root Access. Period. So, all the above said, since there is nothing you can do about it either way, I'd recommend unlocking your phone if that will give you functionality you want (and you don't mind voiding your warranty). The main point of locking from a data protection standpoint is bad apps. as such, be more concerned about what apps can get superuser, rather than what an adversary with physical access can do. – Frank Thomas May 1 '14 at 15:20

I find an app named BootUnlocker which allow rooted device have bootloader locked/unlocked without swiping data.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy